This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/FE76F7D8EC4A11EFA7845862C4F9AE02.roa
File: FE76F7D8EC4A11EFA7845862C4F9AE02.roa (raw, json)
Hash identifier: ffe9csoIa+aK1Zbhj8RuxgnC6GGLQDbgoCQkHm0MFNA=
Subject key identifier: 1B:96:26:18:D5:62:8F:E4:02:D7:6C:EF:59:66:20:D0:4B:AC:53:5A
Certificate issuer: /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
Certificate serial: 052B
Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/FE76F7D8EC4A11EFA7845862C4F9AE02.roa
Signing time: Sun 30 Nov 2025 22:55:16 +0000
ROA not before: Sun 30 Nov 2025 22:55:16 +0000
ROA not after: Mon 30 Mar 2026 00:00:00 +0000
asID: 147179
IP address blocks: 103.174.45.0/24 maxlen: 24
2407:fa40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl
rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1323 (0x52b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
Validity
Not Before: Nov 30 22:55:16 2025 GMT
Not After : Mar 30 00:00:00 2026 GMT
Subject: CN=692ccb54-df9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ae:2d:2c:ad:5a:6f:e1:4b:e8:1f:3f:c7:87:
42:81:cf:fe:be:40:77:da:f5:4c:b1:8b:f1:4e:18:
1c:13:63:15:d2:e4:4b:08:80:76:b2:86:20:21:d4:
9d:4d:6a:4d:a0:f4:3c:1a:15:1d:01:b2:36:f5:f1:
bf:b3:a9:d3:bf:20:13:91:f8:9c:6c:08:58:c3:3a:
9f:2e:ef:f6:24:cf:86:db:2f:80:56:d0:56:bb:ff:
41:6e:9b:40:6f:60:58:40:05:7e:c1:51:f0:72:1e:
85:89:f7:8f:43:dd:32:f2:25:03:c1:c3:b5:17:9b:
a7:72:6f:4c:41:a1:5c:23:f5:22:70:a7:5e:f4:78:
1b:e0:eb:10:6b:97:0e:e4:d0:03:ce:bc:5e:a7:b3:
c5:30:ab:98:a6:b1:6b:cd:f2:60:b8:98:0c:7a:c0:
9c:30:89:aa:84:ac:29:91:55:8a:44:bc:e1:8f:fc:
14:b3:18:3e:9a:55:49:e2:f2:a8:64:13:be:58:53:
21:6e:4e:78:0d:07:8b:b7:76:13:c0:11:8c:69:5b:
4f:71:c6:0f:f8:b9:7c:15:c4:16:41:e8:a5:04:88:
fe:78:36:e5:86:56:ef:20:a2:6b:c8:40:48:aa:20:
6f:67:e0:10:23:a6:72:61:a4:38:8d:e0:c4:54:e2:
3e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:96:26:18:D5:62:8F:E4:02:D7:6C:EF:59:66:20:D0:4B:AC:53:5A
X509v3 Authority Key Identifier:
keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/FE76F7D8EC4A11EFA7845862C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.45.0/24
IPv6:
2407:fa40::/32
Signature Algorithm: sha256WithRSAEncryption
06:48:52:79:59:87:4b:25:63:f6:2b:81:82:6b:fa:b2:2f:30:
f2:d5:46:2f:e6:59:ae:9a:e0:ac:be:83:8b:72:9f:c0:85:02:
7f:ab:59:ad:9f:23:70:4f:58:34:7e:0c:ca:23:64:05:1f:b2:
76:02:99:ec:5d:06:69:1e:9d:7c:4e:ce:9b:65:a6:48:a1:13:
2f:0c:a7:a2:e5:48:a9:f0:61:48:dc:a3:b1:bb:a2:43:58:7a:
29:49:36:29:a6:88:e0:61:83:32:cc:d1:bf:8a:a2:0c:e2:fd:
18:86:fc:2c:b0:1c:1c:76:93:e4:3a:75:1f:3f:0b:33:88:d3:
99:3f:a9:ff:22:7e:bb:40:40:8a:13:cc:89:a8:34:5c:97:25:
0a:db:89:2e:b0:84:a5:37:a4:3e:83:cf:c0:81:68:a5:a1:86:
6e:0a:2d:cb:60:1e:b3:60:42:d2:9c:e9:67:d1:d6:8c:a6:e3:
2f:5b:4e:5e:4c:a2:5f:ac:4e:fe:0a:1b:a2:15:9c:73:64:38:
44:32:fc:c3:b0:3e:e6:35:06:65:81:f8:a6:30:77:cb:5f:ad:
31:ed:91:d8:74:dd:7e:1d:b9:5a:fd:62:bc:8e:1f:5d:f4:13:
a9:2c:2c:35:2a:f1:c5:ec:f6:e3:84:1a:ec:56:0d:03:94:97:
fb:eb:6a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:55:23 2025 by rpki-client